cfmontreal.com

HTML metadata

Title: CF Montréal
Description: Site officiel du CF Montréal, anciennement l'Impact de Montréal, club canadien de soccer évoluant en Major League Soccer (MLS) depuis 2012 et basé à Montréal, au Québec.
Language: fr
Canonical: https://www.cfmontreal.com/

Open Graph

url: https://www.cfmontreal.com/
title: CF Montréal
locale: fr-CA
site name: CF Montréal
description: Site officiel du CF Montréal, anciennement l'Impact de Montréal, club canadien de soccer évoluant en Major League Soccer (MLS) depuis 2012 et basé à Montréal, au Québec.

Technology

CMS: Gatsby

Ads

Google Ads (DoubleClick)
Meta Pixel

Third-party hosts loaded (11)

images.mlssoccer.com×59
cookie-cdn.cookiepro.com×2
res.cloudinary.com×2
storage.googleapis.com×2
connect.facebook.net×1
fevo-enterprise.com×1
offer.fevo.com×1
securepubads.g.doubleclick.net×1
static.srcspot.com×1
www.instagram.com×1
www.tiktok.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2019-08-12

Expires

2026-08-12 83 days left

Updated

2025-08-08

Name servers

pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

DNS records live

NS

ns48.ultradns2.com
ns48.ultradns2.org
pdns1.ultradns.net
pdns2.ultradns.net
pdns3.ultradns.org
pdns4.ultradns.org
pdns5.ultradns.info
pdns6.ultradns.co.uk

MX

10 d405637.a.ess.ca.barracudanetworks.com
20 d405637.b.ess.ca.barracudanetworks.com

TXT

bcn=0F19BA3C-29E3-11F0-84A7-A26060CBC4AE
creatopy-domain-verification=60cb1480-f102-4f0a-8a63-206760415f5b

Verified for

Apple
Atlassian
Canva
GlobalSign
Google
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:servers.mcsv.net include:ecommzone.com include:spf.mandrillapp.com ip4:207.253.3.48/28 ip4:207.253.5.8/29 ip4:64.34.154.128/27 ip4:69.90.10.32/28 ip4:209.167.53.146 ip4:216.94.7.146 ip4:207.134.64.234 include:spf.ess.ca.barracudanetworks.com include:cust-spf.exacttarget.com  include:spf.myconnectwise.net include:spf-ca.emailsignatures365.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:rua+cfmontreal.com@dmarc.barracudanetworks.com; ruf=mailto:ruf+cfmontreal.com@dmarc.barracudanetworks.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wPLHBpd9o9oz+0S/qTRs2cebciiNj4piNnxDYUWitq5+ixnhQfJQtTG51Tt41RDWMig9opHUO7xG/…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6Dl658h9Pajs7pHjER1Y957Ch3e4EpVY44qF2waxjem8RtZlSdYIoHfa+hN6W7Hnbv5+k+e3WzcjKO3T…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDnkFLxQMh77MdC8JhgFGZnVSDBEe5wFBoMGzfFzFslqUy96Hdz8oACa+WUE7Jf4o52fWhxGrmm/lHNE+P0BQZjj/…

selectors probed

Certificate (current)

R12

from 2026-05-05 to 2026-08-03

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.cfmontreal.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src blob: * 'unsafe-inline' 'unsafe-eval'; script-src * blob: 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; font-src * data: 'unsafe-inline';
strict-transport-security: max-age=15768000 ; includeSubDomains